basic routes; sign_in with yubikey works